cxbull[.]com
Verifica phishing e sicurezza per cxbull.com
“Wholesome Gains - CX Bull”
cxbull.com — Contenuto non disponibile (HTTP 502). Tipo di truffa: Crypto Drainer. Riepilogo delle prove: VirusTotal 0/91; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 71/100. Registrar: Ultahost.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy identifies cxbull.com as an active crypto drainer domain currently under investigation for malicious activity.
This domain, registered through Ultahost, Inc., resolves to IP 104.21.57.236 and utilizes a Let's Encrypt SSL certificate. The domain was created on February 12, 2025, and currently exhibits zero detections across 95 VirusTotal vendors. Despite its new registration, this domain has not yet been widely flagged by threat intelligence platforms, indicating potential emerging threat activity.
Given its low detection rate and active status as a crypto drainer, cxbull.com poses a significant risk to users engaging in cryptocurrency transactions. The domain's infrastructure, including its hosting provider and SSL certificate, suggests opportunistic malicious activity rather than sophisticated evasion techniques. As of this advisory, no known blocklist entries or trust score degradations have been recorded for this domain. To mitigate exposure, organizations and individuals should immediately block cxbull.com at the network perimeter and DNS level. Users should also audit any recent cryptocurrency transactions for unauthorized transfers and report suspicious wallet addresses to relevant authorities. Enhanced monitoring of outbound traffic to this domain is strongly advised to prevent potential financial losses.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 16 identified
Drupal is a free and open-source web content management framework.
www.drupal.org Confidenza al 100%Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com Confidenza al 100%OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.
owlcarousel2.github.io Confidenza al 100%Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.
github.com Confidenza al 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confidenza al 100%JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.
www.jivosite.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterne
PD-20260426-CFD74C Recipient: u-abuse@ultahost.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo